Static task
static1
Behavioral task
behavioral1
Sample
b9eb6d453913eb937714a522debfc5277216c9051c31025d60bf219cdc1ceb1d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9eb6d453913eb937714a522debfc5277216c9051c31025d60bf219cdc1ceb1d.exe
Resource
win10v2004-20220812-en
General
-
Target
b9eb6d453913eb937714a522debfc5277216c9051c31025d60bf219cdc1ceb1d
-
Size
773KB
-
MD5
79cfae71bc02dfbeff8ac73957408ce8
-
SHA1
914decf0fc483a97ddf9af8849c4e1342ed69a39
-
SHA256
b9eb6d453913eb937714a522debfc5277216c9051c31025d60bf219cdc1ceb1d
-
SHA512
882d920ad1c1e0e525099e6d6892ef58662e21c109767e3508be122f3bddc0c66f25bf7a1ada31baefdce6f5d37ded793be1e05917471fceeb8968b69612c145
-
SSDEEP
12288:ugjzj/m7Nd/wrODw7DzNRDG/weEmBzRAXeBKxyym6566AwF8MJYb6nsVwJ:JjuZd/nD8RKBEtX2KY/6pRFhYb6nsV
Malware Config
Signatures
Files
-
b9eb6d453913eb937714a522debfc5277216c9051c31025d60bf219cdc1ceb1d.exe windows x86
7c06d8ce43df195b259bab825ebfad80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_fdopen
shell32
ShellExecuteA
user32
BeginPaint
Sections
.text Size: 744KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE